laminas/laminas-mvc-plugins

Release historycaution

The package has only four releases and none in the last 12 months; its latest release was published over four years ago. This materially raises maintenance and abandonment concerns, although the package is a stable metapackage with a narrow purpose.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. For a small stable metapackage this may reflect low change needs, but it still leaves maintenance responsiveness uncertain.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools were detected. This is a transparency gap rather than evidence that the package is unsafe.

Token permissionscaution

The only workflow lacks top-level token permissions, so its permissions are not explicitly constrained at that level. No top-level write permissions were detected, making this a limited workflow-hygiene concern.